I want it to log them in, then prompt them to change their passwordif it's the first time. Subsequent logins to the site are then from
http://mysite.com/Orchard where they would see a login screen and use johnsmith as the username and whatever they just changed their password to be.

So I got as far as creating a new module - the idea is that I can reference Orchard.Users and call the bits I need from there so I don't have to rewrite the wheel ;). I have a controller in there called Logon with an action of Login - the action is marked as
[AlwaysAccessible]

I changed the web.config forms authentication to go to my new route, added a Route class to set my new routing with a priority of 199, figuring that was a high enough number to put it to the top of the queue, restarted IIS, started up orchard and it is going
to the original route - is there something I have missed?